v6.2.11 LTS Release Notes¶
Compatible Plugin API version: 0.15.14
Compatible Morpheus Worker version: 5.4.8
Minimum upgrade version: v6.0.0
Note
Items appended with x.x.x are also included in that version
Warning
Rolling upgrades to v6.2.11 are not supported and will result in rabbitmq message serialization errors. If one node is upgraded in an HA env prior to the others, existing messages will not be able to be processed by the upgrades node(s).
Release Dates
v6.2.11 June 14 2024
New Features¶
- Nutanix Prism Central
Calls to the NPC API which are returned with a 409 error “Edit conflict: please retry change.” are now retried before reporting as failed in Morpheus 7.0.3
Options for “UEFI,” “SECURE BOOT,” “WINDOWS DEFENDER CREDENTIAL GUARD,” and “ATTACH VTPM,” have been moved from the provisioning wizard to the Virtual Image configuration 7.0.3
- Proxies
When appliances report telemetry data back to Morpheus Hub, any configured global proxies are now honored 7.0.3
- Security
Upgraded Apache Guacamole to 1.5.2 to mitigate CVE-2023-30575 7.0.3
Upgraded
bcprov-jdk18
to 1.78 to mitigate CVE-2024-30171 7.0.3Upgraded
commons-compress
to 1.26.0 to mitigate CVE-2024-25710 7.0.3Upgraded
h2database
to 2.2.220 to mitigate CVE-2022-23221 7.0.3Upgraded
ion-java
to 1.10.5 to mitigate CVE-2024-21634 7.0.3Upgraded
jsch
to 0.2.15 to mitigate CVE-2023-48795 7.0.3Upgraded
logback-classic
to 1.2.13 to mitigate CVE-2023-6378 7.0.3Upgraded
logback-core
to version 1.2.13 to mitigate CVE-2023-48795 7.0.3Upgraded
mysql-connector-j
to 8.2.0 to mitigate CVE-2023-22102 7.0.3Upgraded
org.apache.sshd
to 2.12 to mitigate CVE-2023-48795 7.0.3Upgraded
rabbitmq-java-client
to 5.18.0 to mitigate CVE-2023-46120 7.0.3Upgraded
spring security core
to 5.7.12 to mitigate CVE-2024-22257 7.0.3Upgraded
spring-amqp
to 2.4.17 to mitigate CVE-2023-34050 7.0.3Upgraded
spring-web
to 5.3.34 to mitigate CVE-2024-22259 and CVE-2024-22262 7.0.3Upgraded
xmlunit-core
to 2.10.0 to mitigate CVE-2024-31573 7.0.3
- Zerto
Added support for Zerto version 10 7.0.3
Fixes¶
- API & CLI
Fixed update requests to the
storage-bucket
API failing due to aproviderType
property not being passed. This property should not be a requirement 7.0.3Input values configured to not be “EDITABLE” are no longer updated via API request despite returning the correct 400 response 7.0.3
The API endpoint for uploading Packages to Morpheus now works properly 7.0.3
When listing Roles via Morpheus API and filtering to include only Tenant Roles, the response will no longer include the built-in System Admin Role which is not selectable as a Tenant Role 7.0.3
- Ansible Tower
Fixed Ansible Tower Jobs marked as failed in Morpheus UI despite showing as successful in Tower 7.0.3
Fixed Ansible Tower Tasks failing as part of Provisioning Workflows associated with Terraform-type Layouts 7.0.3
- Azure
Fixed an issue where servers in multi-node Azure Instances were not deleted (from Morpheus or Azure) following successful Teardown-phase Tasks 7.0.3
- Clouds
When Clouds are added in the Master Tenant and privately assigned to another Tenant, the Cloud detail page from the Master Tenant now correctly shows total usage (including that of the other Tenant) 7.0.3
- Clusters
NetworkConfig
data is now available in cloud-init metadata (/run/cloud-init/instance-data.json
) when provisioning a cluster with a static IP address 7.0.3
- Forms
Fixed an issue where using Visibility configurations with Disk fields could cause provisioning failure 7.0.3
When Catalog Items are configured from Instance Types whose images have multiple disks, the Disks Input on Forms now properly shows multiple disks to configure 7.0.3
- Import/Export
Fixed Workflow-type Catalog Items not importing successfully into new environments 7.0.3
- Instances
Fixed an issue where VMs converted to managed Instances updated with custom options would lose those option values following the next Cloud sync 7.0.3
Fixed issues converting brownfield VMs to managed Instances when Tag Enforcement Policies with strict enforcement were active 7.0.3
- NSX
Fixed specific scenarios where networks were not listing properly on the reconfigure modal for Instances 7.0.3
For NSX segment creation, a Gateway CIDR configuration is now only required when a Connected Gateway is set 7.0.3
- Network IP Pools
Host records can no longer be created with duplicate IP addresses when both the compressed and uncompressed form of the address are used 7.0.3
- Plans and Pricing
Pricing now works correctly when Price Sets are scoped to Resource Pools 7.0.3
- Plugins
Fixed issues that could arise when deleting Instances which were provisioned using an IP Pool plugin 7.0.3
Fixed the “Editable” and “Removable” flags not being present for storage volumes created by plugin 7.0.3
- Policies
When power schedule policies are configured to allow the schedule to be user editable, the schedule will no longer be reset to the policy value when other edits are made to the Instance 7.0.3
- Security Scans
Security packages are now properly unzipped and made usable when security packages for SCAP scans are hosted in Morpheus Archives 7.0.3
- Security
Fixed a path traversal vulnerability related to Shell Script-type Tasks 7.0.3
Fixed an HTML injection vulnerability related to Catalog Item creation 7.0.3
Fixed csrf tokens being passed in via the query parameter on execution of a search within various pages 7.0.3
Set 644 permissions on the
morpheus.asc
file in Agent install for upgraded security 7.0.3
- Terraform
Fixed Apply State failures on Terraform Apps under specific configurations 7.0.3
- User Settings
Fixed an issue that would cause a 500 error to be thrown when saving new User Settings failed validation. In those scenarios, a UI warning is now displayed instead 7.0.3
- VMware
Added an optimization to the reconfigure logic for workloads on VMware Clouds. If a server is resized to change network interface details, any reserved IP address is only released to the IP pool if a new network is selected for the interface
- XaaS
Tasks can now be run on-demand from the Instance detail page for XaaS Instances. Previously, this did not work and they needed to be run from the Tasks UI instead 7.0.3
- Zerto
Fixed an issue that prevented adding VMs to an existing replication group 7.0.3
Fixed an issue with deleting existing Zerto replication groups 7.0.3
Fixed an issue with re-saving Zerto replication groups that were already existing. Additionally added UI support for surfacing any validation errors to the user 7.0.3
Synced replication groups (those not created in Morpheus) are no longer missing key config information in Morpheus UI 7.0.3
Appliance & Agent Updates¶
- Appliance
Java updated to v11.0.23 7.0.3
- Agent Packages
Morpheus Linux Agent updated to v2.6.2
Node and VM Node Packages Java updated to v11.0.23 7.0.3
Node and VM Node Packages updated to v3.2.24 7.0.3